Browse CVEs

HIGH 7.8 CVE-2024-47698 In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error Ensure … Debian Linux 4.19.323 / 5.4.285+ Fix from $1,9502024-10-21 CRITICAL 9.1 CVE-2024-47685 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() syzbot reported that … Debian Linux 4.19.323 / 5.4.285+ Fix from $2,3002024-10-21 HIGH 8.1 CVE-2024-41311 In Libheif 1.17.6, insufficient checks in ImageOverlay::parse() decoding a heif file containing an overlay image with forged offsets can lead to an o… Debian Linux Patch available Fix from $1,9502024-10-15 HIGH 7.8 CVE-2024-46871 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX [Wh… Debian Linux 5.15.174 / 6.1.109+ Fix from $1,9502024-10-09 MEDIUM 5.3 CVE-2024-8508 NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform … Debian Linux 1.21.1+ Fix from $1,6002024-10-03 HIGH 7.8 CVE-2024-46859 In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses The panas… Debian Linux 5.15.168 / 6.1.111+ Fix from $1,9502024-09-27 HIGH 7.8 CVE-2024-46849 In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: axg-card: fix 'use-after-free' Buffer 'card->dai_link' is realloca… Debian Linux 5.4.285 / 5.10.227+ Fix from $1,9502024-09-27 HIGH 7.8 CVE-2024-46852 In the Linux kernel, the following vulnerability has been resolved: dma-buf: heaps: Fix off-by-one in CMA heap fault handler Until VM_DONTEXPAND wa… Debian Linux 5.15.168 / 6.1.111+ Fix from $1,9502024-09-27 HIGH 7.8 CVE-2024-46853 In the Linux kernel, the following vulnerability has been resolved: spi: nxp-fspi: fix the KASAN report out-of-bounds bug Change the memcpy length … Debian Linux 5.4.285 / 5.10.227+ Fix from $1,9502024-09-27 HIGH 7.8 CVE-2024-46830 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS Grab kvm->srcu wh… Debian Linux 5.11 / 5.15.198+ Fix from $1,9502024-09-27 HIGH 7.8 CVE-2024-46812 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration … Debian Linux 5.10.236 / 5.15.180+ Fix from $1,9502024-09-27 HIGH 7.8 CVE-2024-46821 In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix negative array index read Avoid using the negative values for c… Debian Linux 5.10.236 / 5.15.180+ Fix from $1,9502024-09-27 CRITICAL 9.8 CVE-2024-47175EPSS 64% CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFrom… Debian Linux after 2.0.0 Fix from $2,3002024-09-26 HIGH 7.8 CVE-2024-46746 In the Linux kernel, the following vulnerability has been resolved: HID: amd_sfh: free driver_data after destroying hid device HID driver callbacks… Debian Linux 5.15.167 / 6.1.110+ Fix from $1,9502024-09-18 HIGH 7.8 CVE-2024-46725 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix out-of-bounds write warning Check the ring type value to fix th… Debian Linux 5.10.226 / 5.15.167+ Fix from $1,9502024-09-18 HIGH 7.8 CVE-2024-44974 In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: avoid possible UaF when selecting endp select_local_address() and se… Debian Linux 5.10.226 / 5.15.167+ Fix from $1,9502024-09-04 HIGH 7.8 CVE-2024-44977 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Validate TA binary size Add TA binary size validation to avoid OOB … Debian Linux 6.1.107 / 6.6.48+ Fix from $1,9502024-09-04 HIGH 7.8 CVE-2024-44986 In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in ip6_finish_output2() If skb_expand_head() returns NUL… Debian Linux 5.4.289 / 5.10.233+ Fix from $1,9502024-09-04 HIGH 7.8 CVE-2024-44940 In the Linux kernel, the following vulnerability has been resolved: fou: remove warn in gue_gro_receive on unsupported protocol Drop the WARN_ON_ON… Debian Linux 5.10.234 / 5.15.174+ Fix from $1,9502024-08-26 HIGH 7.8 CVE-2024-43839 In the Linux kernel, the following vulnerability has been resolved: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures To have enough sp… Debian Linux 4.19.320 / 5.4.282+ Fix from $1,9502024-08-17 HIGH 7.8 CVE-2024-42314 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free when adding pages to compressed bio At add… Debian Linux 6.1.108 / 6.6.44+ Fix from $1,9502024-08-17 HIGH 7.8 CVE-2024-42302 In the Linux kernel, the following vulnerability has been resolved: PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal Keith reports a u… Debian Linux 5.10.224 / 5.15.165+ Fix from $1,9502024-08-17 CRITICAL 10.0 CVE-2024-42472 Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious or compromised Flatpak app us… Debian Linux 1.14.10 / 1.15.10+ Fix from $2,3002024-08-15 HIGH 7.8 CVE-2024-42159 In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Sanitise num_phys Information is stored in mr_sas_port->phy_mask,… Debian Linux 6.1.98 / 6.6.39+ Fix from $1,9502024-07-30 HIGH 7.8 CVE-2024-42160 In the Linux kernel, the following vulnerability has been resolved: f2fs: check validation of fault attrs in f2fs_build_fault_attr() - It missed to… Debian Linux 5.15.181 / 6.1.98+ Fix from $1,9502024-07-30 HIGH 7.8 CVE-2024-42136 In the Linux kernel, the following vulnerability has been resolved: cdrom: rearrange last_media_change check to avoid unintentional overflow When r… Debian Linux 6.1.98 / 6.6.39+ Fix from $1,9502024-07-30 HIGH 7.8 CVE-2024-41096 In the Linux kernel, the following vulnerability has been resolved: PCI/MSI: Fix UAF in msi_capability_init KFENCE reports the following UAF: BUG… Debian Linux 6.1.109 / 6.6.37+ Fix from $1,9502024-07-29 HIGH 7.8 CVE-2024-41073 In the Linux kernel, the following vulnerability has been resolved: nvme: avoid double free special payload If a discard request needs to be retrie… Debian Linux 5.10.237 / 5.15.164+ Fix from $1,9502024-07-29 HIGH 7.8 CVE-2024-41000 In the Linux kernel, the following vulnerability has been resolved: block/ioctl: prefer different overflow check Running syzkaller with the newly r… Debian Linux 5.10.221 / 5.15.162+ Fix from $1,9502024-07-12 HIGH 7.8 CVE-2024-39494 In the Linux kernel, the following vulnerability has been resolved: ima: Fix use-after-free on a dentry's dname.name ->d_name.name can change on re… Debian Linux 5.4.291 / 5.10.235+ Fix from $1,9502024-07-12